CVE-2026-80921

CVE-2026-80921 affects the Linux kernel in the KVM s390 vsie (Virtual SIE) subsystem. When shadowing crypto access bits from a format0 apcb (crycb 0 or 1), bits 64–255 retain stale values from the vsie page, potentially allowing a nested guest to access a device no longer available . The CVSS 3.1...

CVE-2026-80921 KVM: s390: vsie: zero stale crypto bits

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: zero stale crypto bits When shadowing crypto access bits from a format0 apcb crycb 0 or 1, the bits 64..255 are unchanged from whatever is in the vsie page in the crycb and thus in the apcb. This gives a nested...

EUVD-2026-75098

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: zero stale crypto bits When shadowing crypto access bits from a format0 apcb crycb 0 or 1, the bits 64..255 are unchanged from whatever is in the vsie page in the crycb and thus in the apcb. This gives a nested...

CVE-2026-80921 KVM: s390: vsie: zero stale crypto bits

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: zero stale crypto bits When shadowing crypto access bits from a format0 apcb crycb 0 or 1, the bits 64..255 are unchanged from whatever is in the vsie page in the crycb and thus in the apcb. This gives a nested...

RLSA-2026:64808 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: bcm: add locking for bcmop runtime updates CVE-2025-38004 kernel: iouring/poll: fix signed comparison in iopollgetownership CVE-2026-52933 kernel: netfilter: nat: use kfreercu to...

ALSA-2026:66180 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation CVE-2026-43133 kernel: ipv6: prevent possible UaF in addrconfpermanentaddr CVE-2026-43339 kernel: crypto: pcrypt - Fix handling of...

The vulnerability of the vgic_its_restore_dte() function in the arch/arm64/kvm/vgic/vgic-its.c module of the ARM virtualization subsystem in the 64-bit Linux operating system allows a attacker to access protected information or cause service failure.

The vulnerability of the vgicitsrestoredte function in the arch/arm64/kvm/vgic/vgic-its.c module of the ARM 64-bit kernel-based Linux operating system involves the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to access...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation CVE-2026-43133 kernel: ipv6: prevent possible UaF in addrconfpermanentaddr CVE-2026-43339 kernel: crypto: pcrypt - Fix handling of...

PT-2026-89091

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: zero stale crypto bits When shadowing crypto access bits from a format0 apcb crycb 0 or 1, the bits 64..255 are unchanged from whatever is in the vsie page in the crycb and thus in the apcb. This gives a nested...

The vulnerability of the snp_begin_psc() function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the snpbeginpsc function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to incorrect checking of the specified index, position, or offset in the input data. Exploiting this vulnerability could allow an...

The vulnerability of the avic_hardware_setup() function in the arch/x86/kvm/svm/avic.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the avichardwaresetup function in the arch/x86/kvm/svm/avic.c module of the virtualization subsystem on the x86 kernel of the Linux operating system is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an...

CVE-2026-80921: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: zero stale crypto bits When shadowing crypto access bits from a format0 apcb crycb 0 or 1, the bits 64..255 are unchanged from whatever is in the vsie page in the crycb and thus in the apcb. This gives a nested...

The vulnerability of the ioeventfd_in_range() function in the virt/kvm/eventfd.c module of the Kernel-based Virtual Machine (KVM) virtualization subsystem of the Linux operating system allows a attacker to trigger a service failure.

The vulnerability of the ioeventfdinrange function in the virt/kvm/eventfd.c module of the Kernel-based Virtual Machine KVM virtualization subsystem of the Linux operating system is related to an uncontrolled, exploitable condition. Exploitation of this vulnerability could allow a attacker to...

The vulnerability of the kvm_arch_vcpu_create() function in the arch/arm64/kvm/arm.c module of the virtualization subsystem on the ARM 64-bit kernel-based Linux operating system allows a attacker to cause a service failure.

The vulnerability of the kvmarchvcpucreate function in the arch/arm64/kvm/arm.c module of the virtualization subsystem on the ARM 64-bit kernel-based Linux operating system is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allo...

The vulnerability of the sev_dbg_crypt() function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux kernel-based x86 platform allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sevdbgcrypt function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to...

Linux Distros Unpatched Vulnerability : CVE-2026-80921

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: s390: vsie: zero stale crypto bits When shadowing crypto access bits from a format0 apcb crycb 0 or 1, the bits 64..255 are unchanged from whatever is in t...

RockyLinux 9 : kernel (RLSA-2026:64808)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:64808 advisory. kernel: can: bcm: add locking for bcmop runtime updates CVE-2025-38004 kernel: iouring/poll: fix signed comparison in iopollgetownership CVE-2026-52933...

CVE-2026-58846

In kvmiommumapsg of iommu.c, there is a possible use after free due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58846

In kvmiommumapsg of iommu.c, there is a possible use after free due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58846

In kvmiommumapsg of iommu.c, there is a possible use after free due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...